That's assuming that there isn't another back channel to access that data.

And even if they don't access file or email content, metadata like access data like Play Store performance, Google searches for competing products, and Google Analytics data, might seem like fair game.